2.5 ipsec user policies

[Mika Penttilä <mika.penttila@kolumbus.fi>]

In 2.5 ipsec users can assign policies to sock (sk->policy) with 
setsockopt. These user policies seem to take precedence over other 
policy lookups. It looks that ordinary users are capable of doing these, 
shouldn't this be restricted to root or something?

--Mika


-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html